Privacy Policy

1. Who we are

Tovira is operated by Prospera Technologies FZ-LLC, a software development company registered in the UAE. This Privacy Policy describes how we collect, use, and protect information when you use Tovira.

2. What information we collect

Information you provide:

• Name, phone number, email address, brokerage name, billing details

Information from WhatsApp:

• Messages you forward to Tovira, voice notes, and contact metadata associated with conversations you initiate with us

Information collected automatically:

• Usage data, error logs, IP address, device type, browser type, and timezone

3. How we use information

• Provide the Tovira service to you
• Extract structured lead data from messages and voice notes you send us
• Send you daily briefings, reminders, and product communications
• Process payments and manage your subscription
• Improve the product through analysis of usage patterns and errors
• Comply with legal obligations under UAE law

We do not use your data to train AI models. We do not sell your data.

4. How we store and protect information

Tovira is hosted on AWS infrastructure. All data in transit is encrypted via TLS 1.3. All data at rest is encrypted at the disk level. Access to production data is limited to a small number of named individuals at Prospera Technologies, all of whom have signed strict confidentiality agreements.

5. Sharing your information

We do not sell your data. We share data only with the following providers, each of whom is bound by data processing agreements:

• Meta (WhatsApp Business API messaging infrastructure)
• OpenAI (semantic memory embeddings via text-embedding-3-small)
• Anthropic (lead extraction, voice note interpretation, and agent reasoning via Claude Haiku 4.5, with Claude Sonnet 4.6 as fallback)
• Groq (voice note transcription via Whisper)
• Stripe (payment processing)
• Resend (transactional email and audience management)
• AWS (cloud hosting infrastructure)

6. Your rights

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, contact support@tovira.io. We respond within 30 days.

7. Data retention

We keep your account and lead data for as long as your subscription is active. After cancellation, we retain data for 90 days to allow account recovery, then permanently delete it within 30 days of that period ending. Voice note audio files are deleted 30 days after transcription. Transcription text is retained with the lead record. Logs and audit data are retained for 12 months for security purposes.

8. Cookies and tracking

We use minimal essential cookies for session management. We do not use third-party advertising trackers or behavioral analytics. You can clear cookies in your browser settings without affecting the core service.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. The ‘Last updated’ date at the top reflects the most recent revision.

10. Contact

Questions about this policy or your data: support@tovira.io. We are based in the UAE.

11. International data transfers

Some of our service providers (Anthropic, OpenAI, Groq, Stripe, Resend) are headquartered in the United States and process data outside the UAE. Where data transfers leave the UAE, we rely on the providers’ contractual safeguards including standard contractual clauses and equivalent protections under each provider’s data processing agreement, in line with UAE PDPL Article 22.

12. Children’s data

Tovira is intended for licensed real estate professionals and is not directed at users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us at the email above and we will delete it.